PC Live Guard. How to remove? (Uninstall guide)

removal by Julie Splinters - -   Also known as PCLiveGuard, PCLive Guard, PC LiveGuard | Type: Rogue Antispyware
12

PC Live Guard is a fake spyware removal tool that imitates a system scan and reports false scan results to make you think that your computer is infected with malware. If you take a look at Live PC Care malware, you will see that these two programs are basically the same thing. Both impersonate Windows Security Center to make this scam look more realistic. PC Live Guard is promoted mostly through the use of Trojans. Once installed, it displays fake security alerts and asks to pay for a full version of the program to remove infections which do not even exist. Do not buy this bogus software and get rid of PC Live Guard from your computer upon detection.

PC Live Guard graphical user interface
[Figure 1. PC Live Guard graphical user interface]

When running, PC Live Guard will create several files on your PC and later will detect those files as malware infections. The files are: cb.drv,sld.drv, CLSV.sys, FW.dll, DBOLE.exe, DBOLE.sys, kernel32.drv, PE.tmp, SM.dll, ppal.dll, SICKBOY.tmp. For example, DBOLE.sys will be detected as Trojan-Spy.Win32.WMPatch infection. Such infection indeed exists, but not in your computer. PC Live Guard uses real infections and their descriptions in case you decide to read more about particular one. That makes this scam even more realistic. Some other malware infections reported by PCLiveGuard:

Trojan-SPW.Win32.Fantast
Trojan-Spy.HTML.Bankfraud.ra
Virus.Win32.Faker.a
BAT.Looper
Trojan-PSW.VBS.Half
Trojan-PSW.Win32.Delf.d
Trojan-Spy.HTML.Paypal.hn
Trojan-Spy.HTML.Bayfraud.hn
Trojan-Spy.HTML.Bankfraud.ix
Trojan-Spy.HTML.Citifraud
Packed.Win32.PolyCrypt
Trojan-Spy.HTML.Sunfraud.a

Pcliveguard.com
[Figure 2. Pcliveguard.com]

What is more, PC Live Guard will display fake security alerts and notifications as shown below. The fake notifications state:

System alert!
malicious applications, which may contains Trojans, were found
on your computer and are to be removed immediately. Click
here to remove these potentially harmful items using PC Live
Guard.

System alert
Click here to remove potentially harmful programs found
immediately using PC Live Guard.

It will also hijack Internet Explorer and display similar fake security warnings while browsing the web. Likely, it will change default search engine to search-gala.com and display its search results. There shouldn’t be any doubts about this rogue application. Remove PC Live Guard from your computer as soon as possible using the removal guide below. You may remove it either manually or with an automatic removal tool. Please note, that this malware may block legit anti-spyware applications including STOPzilla. If this happens, please use Process Explorer and terminate PC Live Guard and other malicious processes.
If you have inadvertently purchased PCLive Guard, contact your credit card company and dispute the charges.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove PC Live Guard you agree to our privacy policy and agreement of use.
do it now!
Download
Reimage (remover) Happiness
Guarantee
Download
Reimage (remover) Happiness
Guarantee
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall PC Live Guard. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.

More information about this program can be found in Reimage review.

PC Live Guard manual removal:

Kill processes:
PC339.exe

Delete registry values:
HKEY_CURRENT_USERSoftware3

HKEY_CLASSES_ROOTCLSID{3F2BBC05-40DF-11D2-9455-00104BC936FF}

HKEY_CLASSES_ROOTxp_edb11.DocHostUIHandler

HKEY_CURRENT_USERSoftwareClassesSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"

HKEY_CURRENT_USERSoftwareMicrosoftInternet Explorer "IIL"

HKEY_CURRENT_USERSoftwareMicrosoftInternet ExplorerDownload "RunInvalidSignatures" = "1"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings5.0User AgentPost Platform "[xSP_2:117fc3395e69e29f71abba93a68c4181_7]"

HKEY_CLASSES_ROOTSoftwareMicrosoftInternet ExplorerSearchScopes "URL" = "http://search-gala.com/?&uid=7&q={searchTerms}"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun "PC Live Guard"

Unregister DLLs:
mozcrt19.dll

sqlite3.dll

Delete files:
PC339.exe

PCLG.ico

573.mof

mozcrt19.dll

sqlite3.dll

vd952342.bd

PCAWWLG.cfg

PC Live Guard.lnk

cookies.sqlite

gid.tmp

SICKBOY.tmp

sld.drv

Delete directories:
C:Documents and SettingsAll UsersApplication Data117fc

C:Documents and SettingsAll UsersApplication Data117fcPCLGSys

C:Documents and SettingsAll UsersApplication Data117fcBackUp

C:Documents and SettingsAll UsersApplication Data117fcQuarantine Items

C:Documents and SettingsAll UsersApplication DataPCYZDUHBELG

%UserProfile%Application DataPC Live Guard

C:Program FilesMozilla Firefoxsearchpluginssearch.xml

About the author

Julie Splinters
Julie Splinters - Malware removal specialist

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

More information about the author


  • Guest

    I encountered the pc live guard page and downloaded setup_build6_294 but didn't run it and deleted it, will my pc be ok?